Platform updates

Changelog.

A record of what’s new across the CyberSec arsenal, from major releases to the details that make the platform better.

12 releases42 update sectionsLatest: 2.14.0

All releases

Browse the release history or search within the notes.

⌕

v2.14.0LatestOctober 10, 2026

Global Bug Bounty & Security Ecosystem: 200+ Platforms, Government VDPs, Web3 Audits, AI Safety Arenas, Freelance Networks, AI Agents, Certification Prep & Full-Stack Fundamentals

Comprehensive Bug Bounty & Crowdsourced Directory

/bug-bounty-platforms

200+ Curated Platforms Across 12 Categories: Expanded the Bug Bounty directory to 203 verified platforms, covering Major Global Platforms (HackerOne, Bugcrowd, Intigriti, YesWeHack, Synack), European platforms (Bug Bounty Switzerland, Yogosha, BI.ZONE, Standoff 365), Asia-Pacific & Middle East programs (bugbounty.sa, bugbounty.jp, Butian, 360 SRC, Bugbase), and Americas/Oceania networks.
Government & National VDP Frameworks: Dedicated category for 20 national vulnerability disclosure programs including CISA VDP (USA), UK NCSC, Swiss NCSC, Singapore GovTech, CERT-In (India), CCB (Belgium), CERT Polska, JVN (Japan), and UAE National Bug Bounty.
Web3 Security & AI Safety Arenas: Coverage for 18 Web3 audit and bounty platforms (Immunefi, Code4rena, Sherlock, Cantina, CertiK, Certora, Hats) alongside frontier AI safety arenas (Gray Swan Arena, HackAPrompt, ødin, Huntr, Microsoft AI Bounty).
Freelance PtaaS, QA Testing & AI Data Annotation: Integrated crowdsourced testing networks (uTest, Test.io, Testlio, Digivante) and AI training platforms (Dataannotation, Outlier, Alignerr, Appen, Toloka) alongside Arab freelance marketplaces (Mostaqel, Khamsat, Nafizly, Elharefa).

AI APIs & Model Routers Gateway

/ai-tools

Unified Model Aggregators: Integrated OpenRouter (unified API gateway for 200+ frontier and open models) and AgentRouter (specialized model routing tailored for agentic coding tools and autonomous workflows).
Developer API Key Portals: Added direct access to Google AI Studio for Gemini frontier models with generous rate limits, and Groq Console for ultra-low-latency LPU inference on open-weights models like Llama 3 & DeepSeek.

AI Security Agents & Autonomous Bug Bounty

/ai-tools

Autonomous Coding & Research Agents: Added Hermes Agent (Nous Research) and ZadLoop platform alongside DeepSeek Harness for agentic problem-solving and automated project development.
Bug Hunting Skill Bundles & Burp MCP: Integrated Claude-BugHunter (82 skills, 15 slash commands, 681 disclosed report patterns across 24 vulnerability classes) and PortSwigger's official Burp Suite Model Context Protocol (MCP) server.
Agentic Bug Bounty Masterclasses & Roadmaps: Curated comprehensive video guides by Momen Samer (0xMannaf) on building real AI bug bounty agents (Ep. 1 & Ep. 2) and Mones Goda Mohamed's complete AI agents roadmap.

Web Technology & Full-Stack Fundamentals

/resources

Core Web Fundamentals Series: Added foundational learning tracks covering Web Technologies architecture, HTML & CSS Crash Course (Codezilla), and Vanilla JavaScript DOM manipulation in 60 minutes (Yehia Tech).
Backend Programming & Relational Databases: Integrated complete PHP step-by-step masterclasses (Nour Homsi), W3Schools PHP interactive references, and SQL Crash Course playlists essential for web application security.
End-to-End Practical Implementation: Added hands-on full-stack small project tutorials connecting frontend, PHP backend, and relational databases.

Offensive Security & Certification Arsenal

/resources

OSCP & OSCP+ Preparation Hub: Added comprehensive Arabic video courses for OSCP+ certification, Ahmed Limbo (@Limbo0x01) OSCP methodologies and walkthroughs, and official PEN-200 study guide PDF resources.
Burp Suite Web Exploitation Course: Added a dedicated Arabic Burp Suite Crash Course covering HTTP proxy interception, scanner workflows, and web testing methodologies.
Privilege Escalation Arsenal Overhaul: Added official winPEAS Windows privilege escalation suite alongside upgraded PEASS-ng new generation and LinPEAS repositories.

Certification Prep Resources

/resources

New Certification Prep Category: Added a dedicated Certification Prep section to the Resources page with curated study materials for INE security certifications.
eJPT & EWPTX Study Materials: Integrated Open Exam Prep interactive EWPTX practice platform, INE eJPT Red Team certification exam notes & cheat sheet, and comprehensive EWPTX V3 proper notes covering XSS, SQLi, SSRF, XXE, deserialization, SSTI, and advanced web exploitation.

Full Changelog & Scroll Reveal

One searchable release history: Consolidated the release notes into a dedicated bilingual page and linked the existing navbar bell directly to it.
Scroll-based release animation: Release entries now reveal as visitors move down the page, while respecting reduced-motion preferences.

Footer Polish & Hover Motion

Cleaner footer branding: Refined the CyberSec logo and description, and tightened spacing to make the footer more compact.
Interactive footer links: Added a subtle horizontal slide on hover for navigation, social, and support links.

v2.13.0October 10, 2026

AI Development, Offensive Security & Full-Stack Learning Resources

AI APIs & Model Routers

Unified model access: Added OpenRouter for access to 200+ AI models and AgentRouter for agent-focused coding workflows.
Developer API portals: Added Google AI Studio for Gemini and Groq Console for low-latency inference on open models.

AI Security & Autonomous Bug Bounty

Autonomous agents: Added Hermes Agent and ZadLoop alongside DeepSeek Harness for automated coding and reasoning workflows.
Red-team integrations: Added the Claude-BugHunter skill bundle and PortSwigger’s official Burp Suite MCP server.
Practical learning: Added AI bug-bounty hunting videos by Momen Samer (0xMannaf) and an AI agents roadmap by Mones Goda Mohamed.

Web & Full-Stack Fundamentals

/resources

Frontend foundations: Added web technology architecture, HTML and CSS, and a practical JavaScript DOM learning track.
Backend and databases: Added PHP courses and references, SQL learning materials, and a hands-on project connecting frontend, backend, and a relational database.

Offensive Security & Certification Prep

/resources

OSCP+ preparation: Added Arabic OSCP+ learning resources, Ahmed Limbo’s methodology and lab walkthroughs, and the official PEN-200 course book.
Web testing and privilege escalation: Added an Arabic Burp Suite course, winPEAS, and updated PEASS-ng and LinPEAS resources.

v2.12.0September 13, 2026

Ambient Particle Canvas, Custom Sword Cursor, Mobile Polish & Accessibility Overhaul

Ambient Particle Canvas Background

/layouts

Lightweight Canvas Engine: Built a dependency-free HTML5 Canvas particle system featuring dynamic depth layers (Parallax), cursor repulsion, and constellation linking without React re-render overhead.
Spatial Rejection & Performance Optimization: Implemented bounding-box spatial early rejection (85% reduction in link distance calculations) and throttled window resize allocations via requestAnimationFrame.
Accessibility & Motion Compliance: Added real-time prefers-reduced-motion event listening with graceful static rendering fallback and smooth exit interpolation.

Custom Retro Sword Cursor & Visual Identity

Pure CSS SVG Cursor: Replaced bloated mouse-tracking JavaScript with high-performance CSS data-URI cursors (classic steel blade for default browsing, enchanted emerald blade over interactive elements).
Adaptive Contrast & Input Usability: Dedicated dark and light mode color variants ensuring high contrast, while cleanly preserving native text cursors on form inputs.

Mobile Viewport Polish & Accessibility Overhaul

Mobile Stats Panel: Made the 'Total Tools / Resources' and 'Categories' statistics panel visible and responsive across all mobile viewports, resolving previous hidden-on-mobile constraints.
Mobile Tool Modal Dual-Action Alignment: Overhauled the modal action footer on mobile viewports (<640px) with balanced horizontal side-by-side button placement, matched heights (py-3), tactical borders, and active press feedback for Close and Launch Resource.
WCAG 2.4.1 Skip Link: Added an accessible 'Skip to main content' landmark shortcut for keyboard-only and screen reader navigation.
Mobile Browser Chrome Sync: Integrated adaptive theme-color meta tags synchronized with theme toggles to tint the iOS Safari and Android Chrome address bar, plus high-res Apple Touch Icon support.
Zero-Latency Search Prefetch: Enabled background idle prefetching (requestIdleCallback) for the ⌘K Command Palette bundle for instantaneous search triggers.

SVG Asset Optimization & Dynamic Theme Masking

74% Asset Footprint Reduction: Stripped legacy Sketch XML metadata and replaced the 1,040-char Base64 loader with a 270-char clean URL-encoded SVG.
Dynamic CSS Variable Masking: Implemented CSS mask and background-color: var(--accent) allowing the spinner to seamlessly adapt to any theme or color palette in real time.

v2.11.0September 4, 2026

Launch of Top 100 Tools Hub & Search Index Deduplication Engine

Top 100 Tools Arsenal

/top-100-tools

100 Curated Security Tools: Integrated the full Top 100 Tools index across 10 specialized categories: OSINT, Scanning & Recon, Exploitation, Web Security, Post-Exploitation, Network Security, Passwords & Auth, DFIR, Cloud Security, and Reverse Engineering.
Dedicated Route & Navigation: Added /top-100-tools with instant client-side fetching, real-time fuzzy search, and domain favicon rendering.

Search Index Deduplication & Integrity Engine

Priority-Based Deduplication: Automated duplicate resolution across datasets (Top 100 Tool > Lab > AI Tool > OSINT > Writeup > Resource) with canonical URL normalization.
Zero Collisions Guarantee: Enforces strict ID uniqueness and pruned 48 redundant items, standardizing the search index to 4,545 verified items.
Dedicated Verification Suite: Added 13 unit tests in tests/searchIndexDedup.test.js verifying normalization, priority resolution, and artifact integrity.

v2.10.0September 2, 2026

Dual-Action Solution Modals & Active Directory Arsenal Expansion

Dual-Action Tool Modal with Solution Guides

Dedicated Solution Action Button: Upgraded ToolModal with a secondary action button (Solution) featuring a BookOpen icon whenever a room provides a curated solution or walkthrough.
Contextual Primary Action: The primary launch button dynamically adapts its label to Open Room when a walkthrough is available or Launch Resource for general tooling.
Strict URL Safety Validation: Both solution walkthrough links and room targets are rigorously validated through isSafeExternalUrl to block unsafe protocol schemes and code injections.

Active Directory & Windows Attack Arsenal Expansion

8 Enterprise AD Guides: Expanded the Resources arsenal with deep-dive guides covering NetExec SMB vulnerability scanning, Tarlogic Kerberos protocol internals, Active Directory DACL/ACE exploitation, and Windows authentication hardening.
Advanced Exploitation Techniques: Added focused tutorials for Kerberoasting RC4 encryption downgrades, forced authentication coercion methods (PetitPotam / PrinterBug), CRTP Red Team methodology, and enterprise LDAP fundamentals.

Global Search Index & Platform Metrics (4,493 Total Items)

4,493 Total Search Items: Rebuilt the search index across all 173 active categories, with the ⌘K Command Palette providing instant zero-lag lookup across tools, labs, writeups, and OSINT resources.
Updated Platform Metrics: Synchronized metrics across the platform reflecting 926 Security Tools, 660 THM Labs, 220 HTB Labs, 1,256 Writeups, 48 AI Tools, and 1,383 OSINT Resources.

v2.9.2August 22, 2026

Resource Loading Aesthetics & Centering, Header Skeleton States & Visual Polishing

Resource Loading Experience & Viewport Alignment

Centered & Balanced Viewport Positioning: Replaced excessive vertical height containers that previously pushed the loader below the fold with a balanced, perfectly centered layout directly beneath the subpage header.
Cyber Glassmorphic Loading Card: Redesigned the loading state into a sleek cyber-themed glass panel featuring a 3D sitNSpin loader in the platform accent color, crisp monospace typography, and an animated shimmer progress bar.

Header Skeletons & State Polishing

Zero-Flicker Stats Skeletons: Replaced the initial 0 count flash in the subpage header stats card with smooth animate-pulse placeholder skeletons while datasets load asynchronously.
Refined Error & Recovery Card: Restyled the dataset load failure view into an aligned glassmorphic card with clear error status and accessible retry trigger.

Platform Engineering & SEO

Automated Version Sync: The build now syncs the package version from the changelog automatically, keeping one source of truth for releases.
Unified Self-Hosted Fonts: Removed the render-blocking Google Fonts request (Outfit); the entire site now runs on locally hosted Geist Sans & Mono.
Per-Page SEO: Added canonical URLs, dynamic Open Graph targets, and a unique meta description for every page.
Unit Test Suite: Introduced Vitest with 21 tests covering the fuzzy search engine, external-link guard, and modal focus management (npm test).
Extension-Safe Hydration: Added a scoped load-time cleanup that strips translator-extension attributes before React hydrates, eliminating console warnings for users with browser extensions.
CSP Refinements: Allowed inline data: fonts in the Content Security Policy to match the optimized font delivery.

v2.9.1August 22, 2026

Search Accuracy Fixes, Performance Hardening & Security Unification

Search Accuracy & Fuzzy Matching

Length-Aware Typo Tolerance: Fuzzy matching now scales with query length, so short queries return precise results instead of matching nearly every tool.
Honest Empty States: When nothing closely resembles a query, the command palette (⌘K) shows a clear "no matches" state instead of arbitrary suggestions.
Unified Matching Engine: Extracted the typo-tolerance logic into one shared engine used identically by the command palette and category page searches.

Performance & Payload Optimization

On-Demand Page Data: Listing pages now load their datasets from JSON files instead of embedding every entry in the HTML, cutting page weight from up to 1.3 MB to ~25 KB.
Shared Card Observer: Replaced one IntersectionObserver per resource card with a single shared instance, keeping category pages smooth even when expanding hundreds of items.
Deduplicated Link Builder: Consolidated TryHackMe room URL generation into a single shared helper used by both pages and the build script.

Security Unification & Data Consistency

Unified Link Guard: Command palette results are now validated through the same http(s)-only check as resource modals before anything opens.
Accurate Platform Stats: Corrected the HackTheBox Active Directory machines count to 72 across page descriptions and homepage cards.

Accessibility & Focus Management

Focus-Trapped Dialogs: Keyboard Tab navigation now stays inside open dialogs (tool details, command palette, and mobile category sheet), and focus returns to the triggering control on close.
Proper Sheet Semantics: The mobile category sheet is now announced as a dialog to screen readers, dismissible with Esc, and moves focus to its close button when opened.

v2.9.0August 14, 2026

Search Performance Optimization, Smooth Scrolling, Bilingual Changelog & Platform Hardening

Search Speed & Real-Time Responsiveness

Zero-Latency Search: Optimized search memory allocation, enabling ultra-fast real-time filtering across 4,400+ tools with zero lag or typing stutter.
Smart Typo Tolerance: Enhanced query matching to accurately resolve typos, swapped letters, and shortened keywords instantly.
Unified Search Experience: Streamlined search accuracy and relevance across both the global command palette (⌘K) and category pages.

Interface Fluidity & Mobile Navigation

Fluid Category Scrolling: Enhanced scroll tracking performance for effortless, smooth 60+ FPS navigation across all resource modules.
Mobile Gesture Optimization: Optimized touch scrolling and drawer responsiveness for a seamless mobile experience.
Instant Category Sync: Improved active section indicator accuracy during rapid page scrolling.

Bilingual Changelog (Arabic / English)

Changelog Language Switcher: Added a dedicated toggle inside the changelog modal to switch between English and Arabic with full RTL layout and typography.
Persistent Preference: The modal remembers your selected language preference across visits.
Complete Release Translations: All historical and latest release notes inside the changelog are now fully localized into Arabic.

Platform Hardening & Stability

Security Hardening: Upgraded text rendering and content parsing routines for enhanced defense and input safety.
Rendering Stability: Reinforced modal overlay handlers and page transitions for maximum cross-browser reliability.
Direct Link Reliability: Synchronized TryHackMe and HackTheBox external resource links for seamless one-click access.

v2.8.0August 14, 2026

HTB & AD Labs Hub, Walkthroughs Index, Warm Beige Light Theme & Bento Layout

Dedicated HTB & AD Labs Section

/htb-labs

220 Total AD Labs & Resources: Built a standalone section for Active Directory penetration testing featuring 72 HackTheBox AD Machines, 61 0xdf Writeups, 59 IppSec Videos, 12 VulnLab Machines, 13 VulnLab Chains, and 3 Red Team ProLabs.
6 Structured Categories: Divided the page into clear navigation tabs for HTB AD Machines, 0xdf Walkthroughs, IppSec Videos, Vulnlab Machines, Chains, and ProLabs.
Multi-Criteria Filtering: Enabled real-time difficulty toggling (Easy, Medium, Hard, Insane) and platform filtering.
Clean Summary Descriptions: Formatted all machine walkthrough summaries into clean, readable descriptions.

Warm Beige & Cream Light Mode Theme

Warm Beige Palette: Introduced a rich warm beige and cream color scheme for comfortable daytime reading.
High Contrast Readability: Applied dark espresso typography achieving WCAG AAA contrast ratio for effortless long reading sessions.
Refined Nav Pills & Floating Capsules: Updated floating navigation pills and badges with clean warm borders and glass tints.

Home Bento Grid Symmetry & Interactive Controls

Balanced Bento Grid: Arranged homepage Bento cards into symmetric layouts highlighting Resources, Free Labs, HTB & AD Labs, Writeups, AI Tools, and OSINT Arsenal.
Tactile Action Buttons: Added micro-hover physics, subtle shadow depth, active press feedback, and shortcut badges.

Search Index Expansion

4,477 Total Search Items: Expanded global command palette index across 173 total platform categories with zero-duplicate precision.
Updated Platform Stats: Synchronized platform metrics reflecting 912 CyberSec Tools, 660 THM Labs, 220 HTB Labs, 1,256 Writeups, 47 AI Tools, and 1,382 OSINT Resources.

v2.7.0August 13, 2026

WCAG 2.1 AA Accessibility, Visual Stability & Code Polish

WCAG 2.1 AA Accessibility & Keyboard Navigation

Accessible Dialog Semantics: Standardized dialog roles and ARIA labeling across all 6 platform modal overlays.
Universal Escape Key Dismissal: Standardized keyboard ESC key event handling across all dialogs.
Visible Focus Rings: Added clear focus indicators across all navigation items, action buttons, and triggers.

Asset Loading & Visual Stabilization

Optimized Typography Assets: Streamlined font requests and weights for faster initial page render.
Layout Shift Elimination: Added explicit dimension and async decoding attributes to visual assets, eliminating layout shifts.
Accelerated Static Generation: Optimized build configurations for lightning-fast page loading.

v2.6.2August 5, 2026

Modular Overlays, Responsive Dialogs & New Pentesting Labs

Modular Overlays & Responsive Dialogs

Modular Dialog Components: Refactored Support and Share dialogs for independent, snappy rendering.
Smooth Scroll Locking: Enhanced multi-modal scroll management to keep background page position locked seamlessly.
Reliable Native Sharing: Added graceful feedback for device native sharing and link copying.

New Security Tools & Lab Walkthroughs

Penelope Shell Handler: Added Penelope to Pentesting Tools — an advanced interactive reverse shell handler.
CTF Walkthroughs Index: Integrated comprehensive room guides and step-by-step methodology notes.
New TryHackMe CVE Rooms: Added newly released challenge rooms and exploit labs.

v2.5.0July 28, 2026

Dataset Optimization, AI Tools Arsenal & Visual Media

Dataset Quality & Precision Mapping

Zero-Duplicate Verification: Audited all tools and labs across datasets to ensure zero duplication and clear categorization.
Precise Category Structure: Organized intelligence tools under OSINT and offensive toolsets under dedicated Resource categories.
Verified Link Index: Refreshed all URLs and repository sources.

AI Security Arsenal & Visual Sharing

AI Security Tools Expansion: Added agent frameworks, automated security scanners, and code assistants.
High-Resolution Social Cards: Designed visual share cards and QR media for easy sharing across community channels.
Responsive Mobile Layouts: Polished button spacing and touch targets across all device screens.